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Abstract. In this paper we prove an explicit formula for the arithmetic intersection num- 
ber {CM{K).Gi)i on the Siegel moduli space of abelian surfaces, generalizing the work of 
Bruinier-Yang and Yang. These intersection numbers allow one to compute the denomi- 
nators of Igusa class polynomials, which has important applications to the construction of 
genus 2 curves for use in cryptography. 

Bruinicr and Yang conjectured a formula for intersection numbers on an arithmetic 
Hilbcrt modular surface, and as a consequence obtained a conjectural formula for the inter- 
section number {CM{K).Gi)e under strong assumptions on the ramification of the primitive 
quartic CM field K. Yang later proved this conjecture assuming that Ok is freely gener- 
ated by one element over the ring of integers of the real quadratic subfield. In this paper, 
we prove a formula for {CM{K).Gi)e for more general primitive quartic CM fields, and we 
use a different method of proof than Yang. We prove a tight bound on this intersection 
number which holds for all primitive quartic CM fields. As a consequence, we obtain a 
formula for a multiple of the denominators of the Igusa class polynomials for an arbitrary 
primitive quartic CM field. Our proof entails studying the Embedding Problem posed by 
Goren and Lauter and counting solutions using our previous article that generalized work 
of Gross-Zagier and Dorman to arbitrary discriminants. 



1. Introduction 

For a prime number i, the £-part of the arithmetic intersection number (CM(i^).Gi) 
counts, with muhiphcity, the number of isomorphism classes of abehan surfaces with CM 
by a primitive quartic CM field K that reduce modulo £ to a product of two elliptic curves 
with the product polarization. These intersection numbers have been studied in detail by 
Bruinier-Yang |BY06] . Yang |YanlOtlYan] . and Goren-Lauter |GL07t[GLll] . In this paper, 
we give an exact formula for this £-part, denoted {CM{K).Gi)i, under mild assumptions on 
K, and a tight bound on {CM{K).Gi)£ for all primitive quartic CM fields K. 

The computation of {CM{K).Gi)e has applications to the computation of the Igusa class 
polynomials of K. Igusa class polynomials are polynomials over Q which are the genus 2 
analogue of Hilbert class polynomials; namely, the roots of the Igusa class polynomials of K 
determine genus 2 curves whose Jacobians have complex multiplication by K. However, in 
contrast to the genus 1 case, the coefficients of Igusa class polynomials are not integral and 
the presence of denominators makes the computation of these polynomials more difficult. 
Indeed, all known algorithms to compute Igusa class polynomials require as input some 
bound on the denominators of the coefficients of the Igusa class polynomials. In addition, 
the sharpness of the bound directly affects the efficiency of the algorithms. The arithmetic 
intersection number CM(i^).Gi gives a method of studying these denominators. In fact. 
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up to cancellation from the numerators, the ^-valuation of the denominators of Igusa class 
polynomials is exactly a (known) multiple of {CM{K).Gi)e. 

Often, explicit formulas for the arithmetic intersection of CM-cycles with other cycles, 
such as the Humbert surface, are proved under severe restrictions on the ramification in 
the CM field K (e.g. |GZ85] l Indeed, Yang proved an exphcit formula for (CM(Js:)^Gi)^ 
under the assumption that the discriminant of K is of the form D^D where D and D are 
primes congruent to 1 (mod 4) lYanlOllYan] . and that is freely generated over the ring 
of integers of the real quadratic subfield by one element of a certain form. 

This explicit formula was originally conjectured, with the assumption on the ramifica- 
tion but without the assumption on Ok, in earlier work of Bruinier and Yang |BY06] . In 
recent work, the present authors with Grundman, Johnson-Leung, Salerno, and Witten- 
born |GJLL+ll] showed that the conjecture of Bruinier and Yang does not hold (as stated) 
if the assumptions on the ramification are relaxed. This gives evidence that, in the general 
case, the formula must be more complicated. 

The main result of this paper is an explicitly computable formula for the intersection 
number {CM{K).Gi)e, under the same assumption on Ok, for all i outside a small finite 
set, and a tight upper bound for {CM{K).Gi)e in general ( §2.ip . The dramatically weaker 
assumptions lead to a formula that is more complicated than that of Bruinier and Yang; 
however, in many cases it simplifies to a formula that is strikingly similar. We give an 
example of this in §2.31 As a result of our formula and upper bound, we obtain a formula 
for a multiple of the denominators of the Igusa class polynomials for every primitive quartic 
CM field K. We explain this further in 

Remark. The arithmetic intersection number CM(i^r).Gi was also studied by Howard and 
Yang |HY12j . They prove, under very mild assumptions, that the values {CM{K).Gi)i agree 
with Fourier coefficients of certain Eisenstein series; however, their work does not give an 
explicit formula for (CM(ir).Gi)^ 

1.1. Overview of the tools. The first part of our proof takes its inspiration from work of 
Goren and the first author |GL07t[GLll] which gave a bound on the denominators appearing 
in the Igusa class polynomials, first bounding the primes that can appear |GL07] . and then 
bounding the powers |GL11] . Their proof studied necessary conditions for the existence 
of a solution to the embedding problem: the problem of determining whether there is an 
embedding Ok End]p^(£'i x E2) such that complex conjugation agrees with the Rosati 
involution associated to the product polarization. 

In this paper, we determine conditions that are equivalent to the existence of a solution to 
the embedding problem and use these equivalent conditions to count the number of solutions 
to the embedding problem. (Yang's proof [YanlOtlYanj also began with a treatment of the 
embedding problem; however, our formulation of it is different and our methods diverge from 
Yang's after this step.) First, we show that a solution to the embedding problem gives rise 
to a supersingular elliptic curve E and endomorphisms x, m G End(-E') with fixed degree and 
trace; this is explained in ^ 

Next, we count these pairs of endomorphisms using results from our earlier paper |LVj that 
generalizes work of Gross and Zagier [GZ85] . These results show that the number of pairs 
(x, u) is equal to a weighted sum of the number of integral ideals in a quadratic imaginary 
order with a certain norm. This is explained further in §3 
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To go from pairs of endomorphisms (x, u) to a solution of the embedding problem, we study 
isogenies y,b oi a, fixed degree from an auxiliary elliptic curve E' to E such that yb"^ = u and 
such that X, ?/, and h satisfy an additional relationship depending on K. Using Deuring's 
correspondence, we translate this to a problem of counting certain ideals in M2(Zip). We 
solve this counting problem in §3 
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2. A FORMULA FOR CM(A") ■ Gi 

Notation. We write F for a real quadratic field, and D for the discriminant of the ring 
of integers Op- Let K denote a totally imaginary extension of F that does not contain an 
imaginary quadratic field; A is a primitive quartic CM field. We say that an abelian surface 
A has CM by A if there is an embedding of the ring of integers Ok into the endomorphism 
ring End(/1). Let CM(A) denote the moduli stack whose S'-points are 



{A, L, A) : A/S is an abelian surface with principal polarization A, 
l: Ok Ends(A), s.t. 6(7) = ^(7)^ 



/ 



where H- 0^ denotes the Rosati involution and {A, l, A) ~ {A', l', A') if there is an isomor- 
phism of principally polarized abelian surfaces between {A, A) and {A', A') that conjugates l 
to l' . There is a finite to one map from CM (A) to M, the Siegel moduli space of principally 
polarized abelian surfaces, obtained by sending {A, l, A) to {A, A). 

Let 7] denote a fixed element of Ok that generates K/F. Often, we will assume that Ok 
is freely generated over Op and that 77 is a generator, i.e.. 

Ok = Op[v] (t) 

We write D := 'Np/Q {^k/f{v)) where Dk/f{v) denotes the relative discriminant of OfIv] 
and we let ao, ai, /So, /3i G Z be such that Ttk/f{v) = «o + c^i^ and NK/piv) = /^o + /3i<^, 
where u = |(-D + a/D). We define 

ck := al + aoaiD + ^al{D^ - D) - 4/3o - 2PiD. 

For any positive integer 5 such that D — 45 is a square, we define tu{5) := ai5 and define 

tx{5),tw{,5) G Z to satisfy 



tx{5) + t^{5) = aa + Dai, t^{S) - t^{6) = aWD - AS, where VD - 46 > 0. 

Then for any integer n such that 2D \ {n + ckS), we define 

/ N ^ n + ckS ^ , , ^ ^ rj- —n + ckS 

nu{n) := -d — — , t^u-^ [n) := fJid + V D - Ad — — — , 

and let n^(n),n^(n) G Z be such that 



n^{n) + n^(n) = /3o + Dl3i - 2n„(n)/5, n^(n) - nx{n) = l3iV D - 46. 
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We also define (i*(n) := U{n)'^ — An^{n) for * G {x,u,w}. For any positive integer /„, set 
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{d^{n)du{n) - fu{t^K - 2t^„v(n))). 



Since tlie integer n implicitly depends on a choice of 5, so does anything that depends on n. 
For simplicity, we omit this dependence on 5 in the notation. 

The origin of these definitions will become clear in ^ for now, it is enough to note that 
these values are easily computed once a choice of r] is fixed. 

Throughout we work with a fixed prime we write B^^oo for the rational quaternion algebra 
ramified only at £ and oo. For any 7 G B^^oo, we let 7^ denote the image of 7 under the 
natural involution and define Tr(7) := 7 + 7^, N(7) := 77^. 

2.1. The main result. 

Theorem 2.1. Assume f. If i \ 5 for any positive integer 5 such that D — 45 is a square, 
then 

(CM(i^).Gi), 



log' 



Otherwise, 



^ C5 /i^(n) ^ 3{n, fu) ■ J {du{n)f^ ^ d^{n),t{n, /„)) . 



(5eZ>o n6 



fu 



4D 

2D|(n+cx<5) 



< 2 E E Mn)J2^{nJu)-^{du{n)f-',d^{n),t{nJu)). 



D-45=D s^D' 



4D 

2D\{n+CKS) 



Here Cs = 2 if 46 = D arid otherwise Cs = 1, and ^^{n) = Ve y^-jjj^J if ^ divides both 

du{n) and dx{n) and ^^{n) = + 1) otherwise. The sum^^^ ranges over positive 

integers such that du{n)/f2 is the discriminant of a quadratic imaginary order that is 
maximal at i. The quantity ^ (rfi, d2^ t) is a sum, over isomorphism classes of supersingular 
elliptic curves modulo i, of a number of pairs of embeddings, precisely ^ {di,d2,t) equals 




i,; : Z 



-^End(E): Tr(zi(di + v^)i2(rf2- v^)) =4t 

d-i+\/d^ 



( 



3{nJu):= n 



Vp{5) 



ii{Q{Vdi)) riEnd{E) =Z 

\ 



/End(E)' 



-Ap) 



. i=o 

\j=Vp{5) mod 2 



where Vp := max (^Vp{5) — mm{vp{fu), t'p(^^^^-^^^|p^)), and 

if {t mod p^ -.t^ - ait + ao = (mod p^)} if C > 0, 



if C < 0. 



Remark 2.2. The quantity ^ {di,d2,t) can be computed, for any given K, via an algo- 
rithm presented in IGJLL"*"!!] . Additionally, Theorem \2.4 below will give a formula for 



^ {di,d2it) in most cases, and an upper bound for ^ {di,d2,t) in the remaining cases, 
and Coniecture \2.6\ and Remark \El\ give an expression for ^ {di, d2, t) as a product of local 
factors which holds in most cases. 

If Ok is not freely generated over Op, then the same methods give an upper bound for 
the arithmetic intersection number. 

Theorem 2.3. For every rj G Ok such that [Ok '■ Opi't]]] is relatively prime to i and all 
primes p < D/4, we have an upper bound: 

^^}!^^}^<2 H fx,{n)J2^{nJ^)-^{dMfu^dx{n),t{nJu)), 

— jd — GM>o 
2D| (n+CK-5) 

with the notation as in Theorem \2.1[ 

The quantity ^ (cii, d2, t) is related to the I valuation of J{di, ^2) = Iliri] [r2](^('''i)^^('''2))- 
It was considered first in 1985 by Gross and Zagier in the case that di and d2 are discriminants 
of imaginary quadratic fields and that di and ^2 are relatively prime |GZ85] . The present au- 
thors recently generalized much of |GZ85] to arbitrary discriminants |LV] . As di = du{n)f~^ 
and d2 = dx{n) are not necessarily relatively prime nor necessarily discriminants of maximal 
orders, this generalization is needed to compute ^ {di, d2, t) and thus to give a formula for 
(CM(i^).Gi)^. Using results from [LV] . we obtain the following theorem. 

Theorem 2.4. Fix n, fu G Z as above, set dx := dx{n),du := du{n),t := t{n,fu), and write 
Ou for the quadratic imaginary order of discriminant du/f^- If the Hilbert symbol 

(du, D{n^ - S^D))p = (du, {dj-''dx - 2tf - dju'^dx^ 

is equal to —1 for some prime p 7^ ^, then ^ [dufZ^-, dx, t) = 0. If ^^^p^ is coprime to the 
conductor of Ou, then ^ {dufu^,dx,t) equals 

2#{P ■■ vAt)>Mdufn')>o,p^2e}_~{2) 4) ■ # < b C a : N(b) = ^^^'.f , b invertible I , (2.1) 

dufu I ADif^ I 

where 

(2 ii d = 12 mod 16, Sn = mod 2 r o -r 00 1 7 . 1 / o ^ 
Pd'{so,Si) := < or if 8 I d,u(so) > ■y(rf) - 2 ^ 



1 otherwise 



1 otherwise 



Furthermore, in all cases, ^ {dufu'^,dx,t) is bounded above by (12. ip and there is an algo- 
rithm to compute ^ {duf~^,dx,t). 



Remark 2.5. If ^ ^p is coprime to the conductor of Ou, then the quantity 
simplifies to 



2#{p ■■ Vp(t)>vp{d^f-^)>0,p\2e} . ~{2) ^^1^^^ ^^-j 



2#{p ■■ p\gcd{Nf-\dufu'),m 
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where N = 

In the case that '^^^""^ is coprime to the conductor, we can also express ^ {dufu'^-,dx-,t) 
as a product of local factors. This expression leads us to the following conjecture. 

Conjecture 2.6. Let di and d2 be discriminants of quadratic imaginary orders and fix an 
integer t. Assume that conductor of di, the conductor of d2, andm := j{did2 — {did2 — 2t)^) 
have no simultaneous common factor. Then 

l+vp{m) f%i) =l,pt/i, 



^{di,d2,t)= n 



2 (^^j =i,p|/,, or 

P\d{p), (d^p), -m)p = l,pt /i 
1 (t^) = -l.Pf/i.^'pM even or 

otherwise, 



where (i(p) e {dx^d2\ is such that the quadratic imaginary order of discriminant d(j,^ is 
maximal at p and fi denotes the conductor of di . 

Remark 2.7. This conjecture holds when fi andm are coprime; in that case it follows from 



Theorem 2.4 




Together, Theorems 12.11 and 12.41 give a sharp bound on {CM(K).Gi)e for all primes i, and 
a sharp bound on the primes i such that {CM{K).Gi)£ ^ 0. The following Corollary gives 
a characterization of these primes. 

Corollary 2.8. Assume f and that {CM{K).Gi)i ^ 0. Then there exists a 5 E Z>o o-nd 
n G Z such that D — 4:5 is a square, n = —CkS (mod 2D), 

N := — G «>o, and (ci„(n), -N\ 

Remark 2.9. One obtains the same corollary even when Ok is not generated over Op by 
one element, by replacing f with the assumption that OfI^]] is maximal at I and all prime p < 
D/4:. Note that different choices oft] G Ok result in different values of D = 1^p/q{Dk/f{v)) 
and each choice results in a valid upper bound. 

Proof. By Theorem 12. ![ {CM{K).Gi)i is always bounded above by a sum over 6 G Z>o 
such that D — 45 is a square and a sum over n G Z such that 2D\{n + ckS) and such 

that := '^^'^""^ is a positive integer divisible by i. Thus, it remains to show that if 
{CM{K).Gi)i ^ 0, then 



{du{n),-N\ 



— 1 p 



for some 6, n as above. 

We first prove that if n satisfies the above assumptions, then du{n) is negative. Since K 
is a totally imaginary extension of F, the relative discriminant of rj is negative under both 
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real embeddings of F M. Using the definition of a^, /3j and ck, one can check that 



Recall that 1^p/q(Dk/f{v)) = thus ck + c^l^ < —^/d. Now consider 
du{n) = {ai5f + = — ial- + ^ + ck 

Since - ra^ > 0, ^ is bounded above by \/1d. Thus (i„(n) < ^ (^"i-f + V/^ + c/^ 

We have already shown that + \/d + c/^ < and 25"^ / D is clearly positive, so du{n) is 
strictly negative. 

Since N is assumed to be positive, {du{n), —N)^ = —1, and so, by the product formula, 
there exists some prime p such that {du{n), —N)p = —1. li p ^ £, then by Theorem 12.41 
^ {duf~'^,dx,t) = for all /„ G Z. Another application of Theorem 12.11 shows that this 
implies that {CM{K), Gi)e = 0. □ 



2.2. An application: Denominators of Igusa class polynomials. One of the important 
applications of the results in this paper is the computation of Igusa class polynomials. Igusa 
invariants and Igusa class polynomials are the genus 2 analogues of the j-invariant and the 
Hilbert class polynomial in genus 1. More precisely, Igusa invariants ii, 12,13 generate the 
function field of the coarse moduli space of smooth genus 2 curves, and the Igusa class 
polynomials Hj k, for j = 1, 2, 3, are polynomials whose roots are Igusa invariants of genus 2 
curves C/C with an embedding t: Ok '-^ End(Jac(C)). If a genus 2 curve C has CM by K, 
then C is defined over Q and all of the Galois conjugates of C also have CM by K. Thus, 
Hj^K e Q[2] for all J. 

However, in contrast to the genus 1 case, the coefficients of Hj^x are not integral. There- 
fore, in order to recover the coefficients from a complex or p-adic approximation, one needs 
more information on the denominators. The denominators of the coefficients of Hj ^. divide 
a (known) multiple of the arithmetic intersection number CM(i<').Gi (using multiplicative 
notation) [GLOTllGLlipYanlOj . For a precise statement of this divisibility, see [YanlOt §9]. 

Since Theorems 12.11 and 12.31 give a multiple of and, in many cases, an exact formula for 
(CM(i^).Gi)£, we obtain a formula for a multiple of the denominators of H^ k for all primitive 
quartic CM fields. Corollary 12.81 also gives a restrictive characterization and bound on the 
primes that can appear in the denominators. 



2.3. Relationship to the Bruinier-Yang conjecture. Theorem 12.11 appears strikingly 
similar to the conjecture of Bruinier and Yang |BY06j which was later proved by Yang [YanlO[ 
I Yanj . Here we give a simpler version of our formula, under additional assumptions, which 
makes the similarity even more apparent. 

Theorem 2.10. Assume f , that £ \ 6 for any positive integer such that D — 46 is a square, 

and that du{n) is a fundamental discriminant for any n eZ such that N = G iZ^o 
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and 2D\{n + ckS) . Then 
{CM{K).Gi) 



^ <5eZ>() ^ n( 

D-45=n S^D-n 



4D ^'^'">u 
2D\{n+CKS) 



where Cs = ^ if D = 46 and Cs = I otherwise, 



Vi{N) if £|gcd(4(n),d„(n)), 



'O if(d,-M)p = -l 



f^ejn) = i v,{N)+i _ ^ ' « ' p^i^M) = < for some ^ 

I 2#{p|gcd{d,M):p^n otherwise, 

and Qld{M) := #{b C Z[£^] : N(b) = M}. 

The Bruinier-Yang formula sums over the same integers 6 and, under the assumption that 
D,D = 1 mod 4 and squarefree, the same integers n (see [ABL^] ). Then for a fixed S and 
n, the Bruinier-Yang formula is a product of a valuation term and the number of ideals of 
a fixed norm - the difference is that in Bruinier-Yang the ideals lie in the maximal order of 
the reflex field of K, rather than in a quadratic imaginary order. In recent work, the present 
authors and Anderson, Balakrishnan, and Park |ABL+] have shown that the formula from 
Theorem 12.101 agrees with the Bruinier-Yang formula, under the assumptions required for 
both formulas, without using Theorem 12.101 or Yang's results |YanlO[rYanj . 

3. Proof of Theorem 12.11 

Since K does not contain an imaginary quadratic field, CM(i^') and Gi intersect prop- 
erly |Yant §3] and so 

(CM(JO.Gi), ^ 1 , . ~ 

logi = ^ #A^-^^"S'^^-^--(-)'^ ^'-'^ 

P(^{CM{K)nGi){¥i) 

where OGinCM(K),p is the local ring of Gi fl CM{K) at P. 

The cycle Gi parametrizes products of elliptic curves with the product polarization; the 
Rosati involution induced by this polarization is given by 

f'' e End{E, X E,) ^g-= (f/ fA [GLOTl Section 3], 

where gij G B.om{Ej, Ei) and g^j denotes the dual isogeny of gij. Given this definition, 
one can see that a pair of elliptic curves Ei,E2, together with an embedding l: Ok 
End(i?i X E2) that satisfies = determines a point P G {CM{K) n ^^(F^). 

Conversely, a point P G {CM{K) fl Gi)(F^) determines an isomorphism class {Ei, E2, i); we 
say two tuples {Ei,E2,l: Ok ^ End(Ei x ^2)) and {E[,E'^,l': Ok ^ End{E[ x E'^)) are 
isomorphic if there exists an isomorphism : Ei x E2 ^ E[ x E2 such that 

iP o L{a) = L'{a) o Va G Ok, and ip o g^ o ip"'^ = {ip o g o tp"^^ \/g G End(£'i x £'2)- 

When Ei = E[, then the tuples are isomorphic if and only if there exists a. ip E Aut(£'i x E2) 
such that ip o L{a) = L'{a) o ip for all a G Ok and tptp"^ = 1. 
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Given two elliptic curves Ei,E2, let W[[ti,t2]] be the deformation space of Ei,E2, and 
let Ei,E2 be the universal curves over this space. We let Iei,E2,l C W[[ti,t2]] denote the 
minimal ideal such that there exists an T: Ok ^ Endw[[fi,t2]]//E^ ^(lEi, IE2) that agrees with 
L after reducing modulo the maximal ideal of W[[ti,t2]]- Then we have 

length dGjnCM{K),p = length W[[ti,t2]]//Ei,E2,M 

for any point P ^ {Ei, E2, i) E {Gi D CM{K)) (F^). Thus, ([31]) can be rewritten as 

m{K).G,), _ ^ ^^^^ . length MSilM .3 
log^ #Aut(E„E2,0 ^ /e.,E2. ' ^ ^ ^ 

where Aut(Ei, E2, l) := {a G Aut(Ei x E2) : crt(a)a^ = Va G and aa^ = 1}. The 
condition cro"^ = 1 ensures that a preserves the product polarization. 

Since Ok = Oplr]], giving an embedding l: Ok ^ End(-E'i XE2) is equivalent to specifying 
the image of a; = |(-D + \/D) and rj, i.e., specifying two elements Ai, A2 in End(-E'i x E2) 
such that 

AiA2 = A2Ai, As+A^ = ao+aiAi, A2A^ = /3o+/3iAi, and Al-DAi + ^{D^ - D) = 0. 

The equivalence is obtained by letting Ai = l (^ ^^/^ ^ , A2 = l^t]). This equivalence is a 

more precise reformulation of the Embedding Problem than the version used in [GL07| p. 
463], where the elements from Ok being embedded were of a simpler form and were not 
necessarily generators of Ok- By representing elements in End(i?i x E2) as 2 x 2 matrices 
idij) where gij G End{Ej, Ei) and expanding the above relations, we see that 



a b \ ( X y 

D-a)' - y^^^^y _yy z 

where a is an integer and x, 6, y, z satisfy 

5:=N(6) =£^i£_:^^ Tr(x) =«o + a«i, 

Tr(y6^) = Tr(|/V6) = N(6)ai, Tr(2;) =aQ + {D-a)ai, 

N(2) + N(|/) =/3o + p-a)/3i, = aixb - xy + yz"" 

N(x) + N(|/) =/3o + a/3i, bz =xb+{D-2a)y. 



(3.3) 



1 

After possibly conjugating Ai,A2 by ( „ 1 and interchanging Ei, E2, we may assume 



1 0^ 

that 2a < D. Then a is uniquely determined by 6. Thus for a fixed 6, the embedding 
L is determined by a tuple (x, y, b, z) satisfying the above relations. Define / := Ix,y,b,z ^ 
W[[ti,t2]] to be the minimal ideal such that there exists 

X G Endw[[ti,t2]]//(IEi), y,b e Homw[[ii,i2]]//(IE2, Ei), and z G Endw[[ti,t2]]//(E2) 

that reduce to x, y, b, and z, respectively, modulo the maximal ideal of W[[ti, ^2]]- Then it is 
clear from the definition of (x, y, b, z) that 

length = length MMJ}. 



Motivated by the definition of isomorphisms of triples {Ei, E2, l) that was given above, we 
say that two such tuples (x, y, b, z), {x', y', b', z') are isomorphic if 

x(j)i = (f)ix' , 602 = (f)ib' , 2/02 = 4>iy', z(l)2 = 4>2z' , for some (f)i G Aut(-E'j). 

In particular, 

Aut(x, y, b, z) := {(pi G kni{Ei) : x(j)i = (pix, b(f)2 = (t>ib, #2 = (t>iy, z02 = (f)2z} ■ 

If 4(5 7^ D, then {x,y,b,z) is isomorphic to {x' ,y' ,b' , z') if and only if the corresponding 
embeddings are isomorphic. Thus, # Aut(x, ?/, 6, 2;) = # Aut(£'i, i?2, i)- 

If AS = D, then this no longer holds. If Ei ^ E2, then # Aut(x, y, b,z) = ^ Aut(£'i, E2, t) 
for all L and corresponding x,y,b,z; however, {x,y,b,z) and (2;, ?/^, 6^, x) correspond to the 
same embedding, although we do not say that they are isomorphic as tuples. If Ei = E2, 
then for each tuple (x, y, b, z) we have two possibilities. Either there exists an (x', y', 6', z') 
that is not isomorphic to (x, fe, z) but corresponds to an isomorphic embedding, or there 
are twice as many automorphisms of {Ei,E2,i) as there are of {x,y,b,z), where t is the 
corresponding embedding. In all cases, we see that for a fixed 6 

V 1 length = C V 1 length ^^^^^'^^JJ 

%^^#Aut(x,2/,6,2;) ^ ' 

where = | if 45 = D and 1 otherwise. 

Fix 6, Ei,E2i and assume that there exists a tuple (x, ?/, 6, 2;) as above. Then, there exists 
X, M := yh^ G End(-E'i) satisfying 

Tr(M) = ai5, Tr(x) =ao + aai, , 

(D-2a)N(M) + 5Tr(xM^) = /3i52, 5N(x) + N(m) = 5 (/Jq + a/3i) , ^ 

where a G Z is such that a < D /2 and {D — 2a)^ = D — 45. This is easy to check using the 
relations (13. 3p on (x, 6, z). Let I^^u ^ be the minimal ideal such that there exists 

x,M G Endw[[fi]]//,,„(Ei) 

that reduce to x,m respectively modulo the maximal ideal of W[[i:i]]. 
The remainder of the proof breaks into four steps. 

(1) Compute ^(g^^^ length MMl^ where the sum ranges over isomorphism classes of 
(E,x,u) satisfying dSSlKM, 

(2) For a fixed [E, x, u) determine the number of isomorphism classes of {E\ y, b, z) such 
that u = yb"^ and (x, y, b, z), satisfy (13.31) ( §3.2p . 

(3) Calculate #Aut(x,y, 6, ^) (gSJ])- 

(4) Determine how the length of '^^^^^'^^^^ relates to the length of MIiiJl_ ( ^3.4D . 

As it is not necessarily obvious how the arguments in § §3.1f[3l^ come together, we summarize 
the argument in §3.51 



3.1. Calculating the number of (£", x,m). In this section we will compute 

{E,x,u) satisfying ^'^ 
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where the sum ranges over one representative from each isomorphism class; we say that 
{E,x,u) is isomorphic to {E',x',u') if there exists an isomorphism i/): E ^ E' such that 
ip o X = x' o ip and ip o u = u' o ip. 

First we show that the elements {E, x, u) are naturally partitioned by an integer n and 
that E is always super singular. 

Proposition 3.1. Let E be an elliptic curve overFi and assume that there exists endomor- 
phisms X and u of E that satisfy fl3.4p . Then E is supersingular and there exists an integer 
n such that ^ 

— e £Z>o, and n + ck5 = (mod 2L)), (3.5) 

where ck '■= + otQ^tiD + aj ^^~^ — 4/3o — 2(3iD. 

Proof. Let i? := Z © Zx © Zm © Zxm^ denote the sub-order of End(£') generated by x 
and u and for any element v G End(£'), write D(w) := Tt{v)^ — 4deg{v) for the discrim- 
inant of the element. A straightforward calculation shows that the discriminant of R is 

(- D(.)DM-(IV(x)lV(.)-2IV(..v)). N^2 ^^^^ 

D(x) D(n) - (Tr(a;) Tr(n) - 2 Tr(xn'^))^ = - D(2xn'^ - Tr(n)x + Tr(x)u). 
Since the discriminant of any endomorphism of E is non-positive, we conclude that 

D(x) D(m) - (Tr(x) Tr(M) - 2 Tr(xM^))2 
4 

is a non-negative integer. Now let n := "^-^^'^W _ Sck- An easy, although tedious, compu- 
tation shows that 

6^D - D(x) D(n) - (Tr(a;) Tr(n) - 2 Ti(xu'^)f , , 

-^D- = 4 • ^'-'^ 

Since K does not contain an imaginary quadratic field, D is not a square, and so this 
quantity must be strictly positive. This implies that R is rank 4 and so we conclude that E 
is supersingular and i? is a suborder in B^ oo? the quaternion algebra ramified only at i and 
infinity. Since i divides the discriminant of any order in B^^oo, we have 6^D — r? ^ 4D£Z>o. 
This completes the proof of the first assertion. The second assertion follows since 

= = N(a;) - /3o - a/3i G Z. 

□ 

Remark 3.2. In |GL07t p. 465], Goren and the first author proved that E must be super- 
singular if K does not contain an imaginary quadratic field. Proposition \3.1\ gives another 
proof of this result. 

Proposition 13.11 shows that the tuples {E, x, u) satisfying (13. 4p can be partitioned by in- 
tegers n satisfying (13.51) . By the proof of Proposition 13.11 fixing such an n implies that 
N(m) = n„(n),N(x) = rixin), and Tr(xM^) = txu'^in) where 

n.(n) := n.(n):=/3o + a/3i-^, & t.^v (n) := - (D - 2a)^. 

ZU 
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The trace of x and u are already determined by 5, so we define du{n) := (ai^)^ — 4n„(n) 
and dx{n) := (ao + aai)^ — 4n^(n). For the rest of the section, we assume that n is a fixed 
integer satisfying fl3.5p . We define 

c- _ c-f \ _/ [iE,x,u)]: Tr(x) = ao + aai, Tr(u) = 1 
~ ^""^ \ N(n) = n,(n),N(x) = n,H,Tr(xu^) = t,.„v(r2) / ' 

where [{E,x,u)] denotes the isomorphism class of {E,x,u). We claim that the length of 
W[[t]]//a;,M is constant for all {E,x,u) G S. 

Theorem 3.3. Let iE,x,u) E £. Then 

f^€(^%^) if £|gcdK(n),4H), 

length W[[t]]/4,= ^ / tA2f5 2, \ 

s UJJ/ ^^^(iiD^^ + lj otherwise. 

Proof. First we show that S ^ only if at least one of du (n) , dx (n) is the discriminant of a 
quadratic imaginary order that is maximal at i. 

Lemma 3.4. Let E be a supersingular elliptic curve over and let x,u E End(-E) be 
endomorphisms satisfying (13.41) . Then the indices 

[Q(x) n End(E) : Z[x]] and [Q(n) n End(E) : Z[u]] 

are relatively prime. In particular, at least one of'L\x\, 'L\u\ is a quadratic imaginary order 
maximal at £. 

Proof. Define w := x + {D — 2a) |. The conditions (13.41) on x, u imply that 

10\ fa 5 \ f X u\ , ( ax + u 6x + (D — a)u 

II II I g^j^^ I 



ly ' \1 D-aJ ' \u/5 w J ' \x + {D- a)u/6 {D - a)w + u 

generate a rank 4 Z-sub module S C M2(B£ oo) that is isomorphic to Ok (the isomorphism 
sends the above matrices to 1,^{D + \/D),rj, and |(-D + \fD)r], respectively). Let p be a 

prime and let S be any order in M2(B^^oo ®q Qp) that contains S. Since Ok is the unique 
maximal order of an integral combination of the matrices above can only be in pS if every 
coefficient is divisible by p. We will show that if p divides both [Q(x) fl End(£^) : Z[x]] and 
[Q(u) n End(£') : then some p-primitive integral combination of the above matrices is 

in pM2(End(-E')), thus arriving at a contradiction. 

If p divides [Q(x) n End(E) : and [Q(n) n End(S) : Z[n]], then 

2px — p Tr(x) + D(x) 2pu — p 1i{u) + D('u) 
2^ ' 2^ ' 

are both in pEnd(£^). Consider the p-primitive combination 



D(m) -pTr(M) 

2^ ^ 



D 



a 5 
1 D - a 



D(a;) — j»Tr(x) 



2p V^/^ ^ 



After expanding and rearranging terms, we can express this p-primitive combination as 
2pn — pTr(n) + D(n) 2px — pTr(x) + D(a;) (2a — D 5^ 



2p 2p \ I 0^ 

which is clearly in pM2(End(£') ® Zp). This completes the proof of the first statement. 
By |Vig80 Chap. II, Lemma 1.5] End(i?)®Z£ consists of all integral elements in End{E)^Q£ 
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so both Q(m) n End(£') and Q(x) fl End(£') are orders that are maximal at i. Since at most 
one of [Q(x) fl End(E) : Z[x]] and [Q(m) fl End(^) : Z[m]] are divisible by at least one of 
Z[x] and Z[m] is maximal at as desired. □ 

Now we return to the proof of Theorem 13.31 Let di G {d^-, dy} be such that di is the 
discriminant of a quadratic imaginary order that is maximal at I and such that di has minimal 

valuation; this is possible by the preceding lemma. Let uji G {\{du — tu) + u, \ {dx — tx) +x} 
be such that ui has discriminant di. We define and uj2 to be such that 

{di, ^2} = {du, d^}, and {2u;i, 2^2} = - i« + 2m, d^ - + 2x}. 

From these definitions, it is clear that I^^u = Iu-i,u}2- 

Work of Gross |Gro86j shows that W[[t]]//(^^ is isomorphic to W^-^, the ring of integers 
in Q£(\/Si)™. An exphcit description of Endwj^/n,fe(E mod J^jJ (where m is the unique 
maximal order of W^J is given in |LVt §6], for all k. Using this description and |LVt Proof 
of Thm. 3.1], we see that UJ2 G Endw^^ /m*^ (IE mod if and only if C'^ divides 

did2 - {did2 - 2Tr(a;ia;^))^ _ d.^du ~ {tJu - 2t^„v(n))^ 

4 ~ 4 ' ^ ' ^ 

where r = k if i\di and r = 2k — 1 otherwise. By the proof of Proposition 13.11 the quantity 
in (13. 7p is equal to {6'^D — n?)/{4:D). Since the length of W[[t]]//aji,(^2 is equal to the maximum 
k such that U2 G EndYy^^/^fe(E mod J^^J this completes the proof. □ 



Corollary 3.5. The sum satisfying length equals 



E 



(52_D-n2e4Dffl>o 
2D\{n+CKS) 




if £|gcd(rf„(ra),4(ra)), 
otherwise. 



The remainder of the section will be devoted to the proof of the following proposition. 
Proposition 3.6. Let n E 7j be such that 5^D — n"^ E ADiZ^o and 2D\{n + Ck5)- Then 

#£(n)= Yl ^{du{n)f-\d.{n),t{nju)). 

Proof. Recall that ^(di, (i2, equals 



E/¥e 



if. z 



^ End(E) : Tr(zi(di + v^)i2(c?2 - v^)) 



/rfT)) nEnd(E) = Z 



/End(E)' 



where the sum ranges over isomorphism classes of elliptic curves. Let {E,x,u) E S{n) and 

du{n)f~'^ and d2 := dx{n). Define two 



set fu := [Qiu) n End(E) : Z[u]]. We let di 
embeddings 

di + y/di 



ii : Z 



i2 : Z 



End(E), h-> 



^9 



^ End(E), 



d2 + Vd'2 
2 
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(2/„u - fuai5 + (i„(n)) , 
(2x — (ao + ctcn) + dx{n)) 



From the definition of and dj, one can easily check that these maps are well-defined and 



that zi(Q(v^)) n End(E) = Z 



One also has 



Tr(ii((ii + \/di)i2{d2 - \^)) = Tr((2/„n - + du{n)) (2x^ - (ao + aai) + d^{n))) 

J u 



4 

fu 



2 

fu 



2du{n)d^{n) 

J u 



as desired. It is clear that if {E,x,u) and {E,x',u') are isomorphic, then the corresponding 
embeddings described above differ by conjugation by an element of End(-E) ^ . This completes 
the proof. □ 

3.2. Determining the pre-image of {E,x,u). In this section we prove the following the- 
orem. 

Theorem 3.7. Let E be a supersingular elliptic curve and assume there exists x, m G End(i?) 
satisfying (13. 4p . Let fu E Z>o be such that Q{u) fl End(-E') is an order of discriminant 
d 



^^jT-. Then 



( 



i^' {{E', y, b, z) ■.u = yb'^,{x, y,b,z) satisiy (ESI)} = JJ 



\ 



E :5M,(Tr(^),N(^)) 



. i=o 

\j=Vp(5) mod 2 



where w := x + {D — 2a)u/S, rp := max (^Vp{6) — min(t>p(/u), t>p(^^^^^^j^^^^)), and 

i^{tmod p^ -.1? - ait + ao = (mod p^)} if C > 0, 







if C < 0. 



Proof. Fix an {E^x^u) satisfying (13.41) . Assume that there exists an elliptic curve E\ b,y E 
Hom(i?', E), and z G End(i?') such that u = yb"^ , bz = xb + {D — 2a)y. Then there is a left 
integral ideal / := Hom(£", E) o 6^ of i? := End(i?) which has the following properties: 

(1) N(/) = S, 

(2) S,u E I, and 

(3) w:=x + {D- 2a)f G RO(J) := {A E R ^ Q : lA C I}. 

In fact, we claim that this map is a bijection (when {E, y, b, z) are considered up to equiva- 
lence), so 

#{[{E', y, b, z)]:u = yb\ (x, y, b, z) satisfying (01)} = # {/ C i? : satisfying (1), (2), (3)} . 

The proof of this claim relies on Deuring's correspondence between supersingular elliptic 
curves and ideal is oo! we describe this now. Fix a supersingular elliptic curve E /¥i, and 
fix an isomorphism ifj : End(£') — )■ i? C B^^oo, where i? is a maximal order. Note that ip allows 
us to view elements of End(£') ® Q as elements of B^^oo- Given an element G Hom(i?, £"), 
we obtain an embedding Hom(£", E) -> End(£') by mapping f ^ f o cj). Thus we can view 
Hom(£", E) as a left ideal of End(£') or, by using the isomorphism ^, as a left ideal / of R. 
In fact, Deuring showed that the map 

{(E', (t):E^E')}^ {left ideals / of i?} , (E', 0) ^ ^/;(Hom(E', E)0) 
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is surjective. In addition, if il){B.om{E' , E)(j)') = ilj{B.om{E" , E)(j)'), then 0" = <yc'o0', for some 
ip' e Isom(ii^', £"'). For a more complete description of this correspondence see Deuring's 
original article |Deu41] or |Wat69t §§3,4]. 

The morphism ip also allows us to view End(-E") as a subring of B^ oo! fix an isogeny 
(f): E E', and consider the map ip' : End(i?') — > B^ oo that sends an endomorphism / to 
deg\(/)) ^('i^^ ° / ° 0)- Let R' = tp' {End{E')) . It is clear that R' is contained in the right order 
of the ideal / = ijj{B.om{E' , E)(j)), and since R' is a maximal order we must have equality. 

Now we return to the proof of the claim. Let / C i? be an ideal satisfying conditions 
(1), (2), and (3). Then, by the discussion above, there exists an elliptic curve E' and an 
isogeny (p: E ^ E'. Let b := 0^. Since / has norm 6, the degree of b is also 6. Since 
u E I, there exists a y G B.om{E', E) such that = u; moreover, y is unique. Since 
x + {D - 2a)u/5 G R0(/), there exists a ^ G End(E') such that bzb^ /5 = x + {D - 2a)u/6, 
or rather that bz = xb + {D — 2a)y] one can check that this relation uniquely determines z. 
Thus, given an / that satisfies conditions (1), (2), and (3), we obtain {E',y,b,z) such that 
u = yb"^ and {x, y, b, z) satisfy fl3.3p . 

Let E[, E2 be elliptic curves and (pi: E ^ E[ isogenies such that Y{om.{E[, E)(pi = I. Define 
bi := 0^. Since B.om{E[, E)(pi = B.om{E2, E)(p2, there exists some (pi^2 £ Isom(i?^, i^g) such 
that 61 = 62 o 01,2- As described above, there exists yi G B.om{E^, E) and Zi End(£'j') that 
are unique such that 

u = yib'^, biZi = xbi + {D - 2a)yi. 
Since yi := 7/2 o (pi 2 and Zi := 0^2-^201,2 also satisfy these equations, we have yi = yi and 
zi = Zi. Thus {x,yi,bi, zi) is isomorphic to (x, 1/2, 62, -2^2)- This completes the proof of the 
claim. 

Now we have reduced the problem to a question about ideals in B^^oo- 

Theorem 3.8. Fix R a maximal order in B^^oo- Assume that x,u E R and 7, 5 G Z are such 
that 

Tr(u), N(u), and Tr(xn^) + 7 N(u)/(5 are modulo 5. (3.8) 
Define w ■.= x + 'yu/6, Cp E Z to be such that up~^p G Rp\pRp, and Vp := max{vp{6) — Cp,0) . 
Assume that for all p\S,p 7^ i, either Cp = or Qp{p'^''w) fl (End(-E') ® Zp) = Zp[p^'pw]. Then 
#{I C R : 6,u e I, N(/) = 6, and w := x + G R0(/)} equals 

Vp{5} 

n E 3r?i,(Tr(^),N(^)) 

\j=Vp{S) (mod 2) / 



where 



#{t mod p^ ■.t'^ - ait + ao = (mod p^)} if C > 0, 
if C < 0. 



Since the proof of this theorem is completely independent of the rest of the paper, we 
defer it until §3 If we show that x,u,6,'-f = D — 2a satisfy the assumptions of Theorem! 



and that Cp = mm(vp{fu),Vp{ ^^^^~2^^^^^^^ )), then we can apply Theorem 13.81 to complete the 
proof of Theorem 13.71 

It is clear from (13. 4p that the assumptions listed in (13. 8 p are satisfied; we now prove the 
claim regarding p^'pw. 
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Lemma 3.9. Let p be a prime such that p\5 and Cp ^ 0. Then 

Qpip^'^w) n (End(E) ® Zp) = Zplp'-^w]. 

Proof. From the definition of Cp, it is clear tliat w := p^^w G (End(£') ® Zp). If D{w) has 
trivial conductor, then the result is immediate. Assume that D{w) has non-trivial conductor. 
Then Qp{w) D (End(E) ® Zp) ^ Zp[zZ;] if and only if | + d(^)-pT^("') g End(E) ® Zp. 
First assume that Vp > 0. Since w is integral D(ty) and p\ Tt{w). Thus 



- + n 9 e EndCB ® Zp 

p 2p^ 



if and only if - G End(£')(g)Zp, which in turn is equivalent to -{D-2a)-!^^-^ E End{E)<^Zp. 
By definition of Cp, this occurs if and only if p\D — 2a. Assume that p is odd. Since D is the 
discriminant of a real quadratic field Vp{D) < 1, so either p \ D — 2a or Vp{6) = 1. However, if 
rp > and Cp 0, then Vp{6) > 2. Therefore p f D-2a and hence Qp{p''pw)n{End{E)®Zp) = 
TLp\p'^^w\. If p = 2, then a similar calculation gives the same result. 

Now assume that rp = 0. This case will be similar to the proof of Lemma [3.41 Consider 
the element 



—a + 



a b 
1 D-a 



X u 



2p \u^l 5 w 

-p 

2p 



u 6w' 

w' u + {D- 2a)w' 



in M2(End(E)), where w' = w + D(''")-pTrM _ ^^^^^ ^ (End(E) ® Zp) ^ Zp[w], then this 



element is in pM2(End{E)). However, 

1 0\ fa S \ f X u\ , ( ax \ u 5x + — a)u 

II II I I 



^0 \)' \\ D-a)' \ulb w)' \x^{p-a)ulb {D - a)w + u ^ 

generate a rank 4 algebra that is isomorphic to Ok so a p-primitive integral combination of 
these elements can never be in pM2(End(-E')). Thus Qp{w) fl (End(i?) (g) Zp) = Zp[w]. □ 

Now we turn to the computation of Cp. By the definition of fu, 



Qp{u) n (End(£;) ® Zp) = Zp 

Since 



D(u)-/„Tr(n) 



fu '^fu 

u fu f u D(n) - /„Tr(n)\ D(M)-/„Tr(M 



r r \fu 2/2 ; 2/„r 

it is clear that ^ G End(£') ®Zp if and only if s < Vp{fu) and s < Vp{ ^^^^~j"^]^^^^ ) . Since Cp is 
the maximal s such that u/p^ G End(-E) ® Zp, this completes the proof of Theorem 13. 7[ □ 

3.3. Computing 7^ Aut(x, 6, 2;). 

Lemma 3.10. Fix elliptic curves Ei,E2 and assume there exist isogenics x G End(-E'i),2; G 
End(i?2), and y,b E Hom(i?2, -Ei) satisfying (\3.3\i . Then Aut{x,y,b, z) = 2. 

Proof. Recall that 

Aut(x, y, b, z) := {(pi G Ant{Ei) : x0i = 602 = 4>ib, y4>2 = 4>iy, z(f)2 = <p2z} . 
Aut(x, u) := {(j) G Aut(£') : x(j) = (px, ucp = (pu} . 
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It is clear that there is a homomorphism Aut{x,y,b, z) — )• Aut(x, (0i,02) <Pi- 

Similarly we obtain a homomorphism 

Aut(x, y, b, z) Aut(2;, 6^?/) := {0 G Aut(£') : (pz = zcp, (f)b'^y = b'^ycp} , 

that sends (0i,02) ^ 02- Therefore, we have an embedding 

Aut(x, y, b, z) Aut(x, u := yb"^) x Aut(2, u* := b'^y). 

The proof of Proposition [3]T] shows that x, u generate a sub-order of End(i?i) of finite index 
and that End(i?i) is rank 4. The same argument can be applied to z^ u* = b^y G End(i?2) to 
show that these elements generate a sub-order of End(£'2) of finite index and that End(£'2) is 
rank 4. Thus, Aut(x,M) C Z(End(Ei))^ and Aut(z, C Z(End(E2)'') where Z{A) denotes 
the center of A. Since the center of End(i?j) is just Z, we see that Aut(x,M) = Aut(2;,M*) = 
{±1}. Using the embedding above, it is easy to check that Aut(x, y, b, z) = {±(1, 1)}. □ 



3.4. Relating multiplicities. Fix elliptic curves Ei,E2, and isogenics x G End{E),y,b G 
Hom(£'2, El), and z G End(-E2) satisfying (13.31) . Let Iz C W[[if:i, ^2]] be the minimal ideal such 
that there exists an isogeny z G Endwiiti.tz]]//^ y t z (^2) that reduces to z modulo the maximal 
ideal of W[[ti, ^2]] and define /„* similarly where u* := b'^y. Since z, u* are endomorphisms of 
El, we can view /„* as ideals of W[[t2]]; similarly we may view Ix,u as an ideal of W[[ti]]. 

Proposition 3.11. The length of Ml£lM hounded above by 2 flength MMV // £ f 5, 

-'-x,y,b,z y -'-x,u J 

then 

length — = length 

Proof. By the same argument used in Lemma [3.41 applied to z,u* instead of x,u, either Z[z] 
or is an order that is maximal at If ^[z] is maximal at I, then define J := J^; 

otherwise define J := . By definition of Ix,y,b,z, Ix,u, and J, we have the containments 
Ix,u, J ^ Ix,y,b,z- Therefore, we have a surjection 

W[[ti,t2]] , W[[ti,t2]] 

~l~ "-^ ^x,y,b,z 

This gives 

length < length ^M. 

-^x,y,b,z Ix,u ~\~ J 

By |Gro86] . J is generated by a linear or quadratic monic polynomial in ^2- Thus 

length — ^il^ < 2 length 



Ix,u ~\~ J \ Ix,u 

This completes the first half of the proof. 

Now we assume that i\ 5. Since deg(6) = 5 is prime to i, b gives an isomorphism between 
the formal groups of Ei and E2. Then the argument is exactly the same as in |GK93t Proof 
of Lemma 5.5]. □ 
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3.5. Summary. Now we resume our proof of Theorem 12.11 Recall that we had shown that 

— — = 2. c^i^i^ 2. #Aut(x,y,6,^)^"^^'^ ~t::;;7- 

D— 4<5=n up to iso. 

as above 



The argument in §3.31 and Proposition 13.111 show that 

^^^^ E -.EE E thMM^ 

fleZ>o El E2 x,y,b,z 

D— 45=n up to iso. 

as above 

and ii i \ 5, then 

(CM(ii-),G,), ^ ^Y-Y- Y- 1 W|M] 



E c^.EE E r'^"6^"T 



l0g£ ^ ^ 2 4,ybV 

D— 45=n up to iso. 

as above 



Using the results from § §3.1f[3l^ we will rearrange the terms as follows 

\ E -«EE E -st.^ 



56Z>o -El El x,y,b,z ^''^^"^ 

D— 45=n up to iso. 

as above 



I J2 Yl length ^M.#|(i^2,y,&,^)asabove:n = y6^} 

5eZ>o [(Ei,x,n)] 

-D— 45=n as above 

^ Y 5Z 5Z # {(^2,Z/,&,2) as above : M = 1/6^} 



2 

5eZ>o neZ s.t. [{Ei,x,u)]e£{n) 

— 4n — S^^>o 
2D\{n+CKS) 



o Y 5Z ^^'^^^^ X] #{(£'2,2/,fc,^) as above : u = 



2 

5ez>o nez s.t. /uez>o [(£;i,x,M)]e£'(n) 



4D ' 
2i:i|(n+cjf<5) 



D-45=n iSfD^g^^Q [Q(n)nEnd(i!;i):ZM]=/„ 



5eZ>o neZ s.t. /neZ>o [(£;i,a:,«)]6f (n) 

Z)_45=n i^l^gffi^g [Q{u)nEnd{Eiy.Z[u]]=fu 
2D\{n+CKS) 

2 ^ 



^ E E '"^^'^^ E ^{nJu)f{du{n)fu^,d^{n),t{n,Q). 



(56Z>o neZ s.t. fu&>0 

— 45 — eM>o 

2D\{n+CK&) 

This completes the proof of Theorem 12.11 □ 

4. Proof of Theorem 12.31 

If rj is any element of Ok \ Op-, then given any embedding l: Ok ^ End(£'i x E2) we 
can restrict the domain to obtain an embedding L\op[rj\ '■ Opi^]] ^ End(ii^i x E2). From the 
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definition of Iei,E2,l ^ W[[ti,t2]], it is clear tliat 



length ^"'•'''ll< length 



Since tlie center of End(i?i x E2) ® Q is exactly Q, it is also clear that 

Aut(Ei, E2, l) = Aut(Ei, E2, lIofItj])- 

If l: Oplf]] )■ End(-E'i x E2) is any embedding (t may or may not arise as the restriction 
of an embedding Ok ^ End(-Ei x E2)), then 

' .length '^11 



# Aut(_E'i, _E2, Iei,E2,i. 
is positive. Therefore 

(CM(A-).GO,= E ^Autll E length ,4.1) 

if^Aut[Ei,E2,i.) ^Ei,E2,l 

t: OK'^'End{EixE2) 

is bounded above by 

V J ..length ^1''"''". (4.2) 

t: Op['ri]^End{EixE2) 

We compute (14. 21) in the same way that we computed fl4.1l) . As long as rj generates an 
order that is maximal at i and all primes p\6 where 6 is any positive integer such that D — 46 
is a square, the entire proof goes through verbatim with the exception of Lemma 13.41 

When rj does not generate the full maximal order Ok, the arguments in the proof of 
Lemma 13.41 prove the following slightly weaker lemma: 

Lemma 4.1. Let E be a supersingular elliptic curve over and let x,m G End(-E') he 
endomorphisms satisfying (13.41) . Then greatest common divisor of the indices 

[Q(a;) n End(E) : Z[x]] and [Q(n) n End(E) : Z[u]] 

is supported only at primes dividing [Ok '■ C^f ['?]]■ In particular, if [Ok '■ Oplr]]] is coprime 
to i, then at least one of%[x\, 1j[u] is a quadratic imaginary order maximal at i. 

As the rest of the proof only requires that at least one of 7j[x] and Z[m] is maximal at i 
and that any p[S <D/A does not divide both [Q{x) fl End(E) : and [Q(u) fl End(E) : 
this lemma, together with our assumption on rj, suffices to complete the proof of 
Theorem [231 □ 

5. Embeddings of imaginary quadratic orders into endomorphism rings of 

supersingular elliptic curves 

In this section, we prove Theorem 12.41 which we restate here for the reader's convenience. 

Theorem. Fix n, fu E Z as above, set := dx{n),du ■= du{n),t := t{n,fu), and write Ou 
for the quadratic imaginary order of discriminant du/f^- If the Hilbert symbol 

{du, D{n^ - 6^D))p = {du, {duf-^d, - 2tf - dj,,-^d^)p 
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is equal to —1 for some prime p ^ C, then ^ {dufu ^, dx, t) = 0. Otherwise ^ [dufu c^a;, ^) 
is hounded above by 

2#{P ■ ..W>..K/.-)>o,pt2n . ■ # I b C a : N(b) = , b invertible 

where 

{2 if (i = 12 mod 16, sq = Si mod 2 r o -f qo i ^ ^ i ^ o ^ ^ 
1 otherwise I ^ 

Furthermore, we have equality in the case that ^^^^p'^ is coprime to the conductor of Ou and, 
in all cases, there is an algorithm to compute ^ {dufu^,dx,t). 

5.1. Background. The proof of Theorem 12.41 rehes heavily on results proved in [LVj . We 
state the relevant results here and summarize the main ideas of the proofs. The interested 
reader is referred to [LVj for the details. 

Let di and d2 be discriminants of quadratic imaginary orders and assume that the quadratic 
imaginary order of discriminant di is maximal at i. Write /j for the conductor of the order of 
discriminant di. For every SL2(Z)-class of elements in the upper half plane with discriminant 
di, we fix a representative ri. Let E{Ti)/Qg be the elliptic curve with j-invariant j(Ti). We 
may assume that E{ti) has good reduction and write E{ti) for the reduced elliptic curve 
over F^. We fix an isomorphism : + v^)] End(-E'(ri)) and let cui G End(£'(ri)) 

denote the image of \{di + ^/d[) in End(£'(ri)) under this isomorphism. 

Consider the following set 



TT r 0GEnd(i?(ri)): Tr(0) = rf^, N(0) = - 4), \ .^ 

\ Tr(a;i ■ 0^) = t, Q(0) n End(E(ri)) = / ^ ' ^ 

By |LVt Thm. 3.1 and proof of Thm. 3.1], we have: 

Theorem 5.1. Assume that did2 7^ {did2 — 2t)^. // the Hilbert symbol 

(^2, {did2 - 2tf - did2)p 

is equal to —1 for some prime p ^ i, then (15. ip is empty. Otherwise the cardinality of (15. ip 
is bounded above by 

2#{p-p{t)>-p{'ii)>o,Pt2n .^^^(^^^2) .21 _ (d^d2-2tf 

where 

~(2), , '''^Rl'/r^'>'°r?/^"°''' \ /2 if32|ci,4|(.o-2.,: 

1 otherwise 



and 



N(b) = iV, b invertible, 
2l(iV) = #<( bCO,,: p\bfoia\\p\gcd{N,f2),p\id, 

p3f b for all p\p\gcd{Nj2,di),p^ 
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Furthermore, this upper bound is an equality in the case that '^I'^a ('^I'^a coprime to the 

conductor of Od^ and, in all cases, there is an algorithm to compute the cardinality of (15. ip . 

Idea of proof: A calculation shows that the discriminant of the suborder R := Z[u;i] ©Z[a;i]0 
is (^{did2 — {did2 — 2t)^))^. Since, by assumption, this quantity is nonzero, the suborder R 
has rank 4 and so must be contained in B^^oo- Using arguments like those in Proposition 13 -H 
one shows that did2 > {did2 — 2t)^ and thus we obtain the Hilbert symbol statement. 
To prove the upper bound, we need to develop more machinery. In [LVl §6], we give 

^)). Using this presentation, 

ed norm and trace give rise t 

Pic o. 



explicit presentations of End(£'(ri)) as suborders of M2((! 

one shows that elements of fixed norm and trace give rise to invertible ideals in Od^ that 

— . Moreover, multiple elements can give rise to the same 



have a fixed ideal class in „„. „ 

2PicC'di 

ideal only if t is sufficiently divisible by primes dividing di . 

If \{did2 — {did2 — 2t)^) is coprime to the conductor of Oa^, then the converse holds, i.e., 
given an ideal in a fixed ideal class, one can construct one (or multiple, depending on t) 
endomorphisms with the desired properties. The interested reader can find the details 
in m §§5,6]. 



5.2. Proof of Theorem 12.41 Let di and d2 be discriminants of quadratic imaginary orders 
and assume that the quadratic imaginary order of discriminant di is maximal at i. Recall 
that ^(di, (^2, t) equals 




ij : Z 



^ End(E) : Tr(zi(di + Vdi)i2{d2 - v^)) = 4t, 



/rfT)) nEnd(E) = ii(Z 



/End(E)' 



We will relate ^ {di,d2,t) to the number of endomorphisms of reductions of elliptic curves 
with complex multiplication; precisely, we will show that ^ {di,d2,t) equals 



— V # (0 G End(E(ri)) : Tr(0) = ^2, N(0) = ^(rf^ - ^^2), Tr(v,(rfi + 



2t 



Let E /F^ be an elliptic curve and let i\ : Z 



that ii(Q(Vrfi)) n End(E) = Zi(Z 



End(£') be an embedding such 



By Deuring's lifting theorem [LanSTl Chap. 



13, Thm. 14], there exists a t\ in the upper half-plane of discriminant d\ such that E{ti) 
is isomorphic to E. Furthermore, after possibly replacing E with an isomorphic curve, 
and conjugating 21,^2 by an automorphism ip of E, we may assume that the embedding 

ir, : Z ^ End(E(ri)) ^ End(E(ri)) either agrees with ii or differs from ii by 

precomposition with the nontrivial Galois automorphism. By |Gro86j , the class of ti modulo 
SL2(Zi) is unique if i \ di and otherwise there are exactly two choices for the class of ri. 
Moreover, the choice of is unique up to multiplication by units in (Imii)/{±1}. 

Conversely, every ti gives rise to an elliptic curve E(Ti)/¥i and an embedding 



t^-^ '. Z 



di + y/di 



-> End(E(ri)) ^ End(E(ri)). 
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By [Wl Prop. 2.2], we have Vi(Q(W7)) n End(E) = v,(Z [to^ ). Thus, 
{ii : Z [^^1^1 End(^)} 9 



End(E) 

E/¥e 

where e denotes the ramification index of i in Q(v^)- 
Now fix an element ti and fix an embedding 12 : Z 



End(£'(ri)) such that 



Tr(v^((ii + Vrfi)^2('^2 — v^)) = 4t. Then ^2 uniquely determines an element G End(-E'(ri))) 
such that 

Tr(0) = d2, N(0) = ^{dl - d2), Tr(^.,(rfi + v^)0^) = 2t, 

namely := ^2 j . Conversely, a choice of uniquely determines an embedding 

22: Z Jte^j (End(^))- Therefore, ^{di,d2,t) equals 



-■—■2 V # I0 G End(^(ri)) : Tr(0) = ^2, N(0) = ^(rf^ - ^2), Tr(v, (^i + v^) ■ 0"^) = 2t 
e Wi ^-^ I 4 



In |LVt Thm. 3.1], the present authors explain how to compute 



[n] 



G End(E(ri)) : Tr(0) = ^2, N(0) = \[dl~ ^2) 



Tr(z,, (rfi + v^) ■ 0V) = 2t, Q(0) n End(E(ri)) = Z[ 



It is straightforward to see how to modify the proof of |LVl Thm. 3.1] in order to omit the 
last condition, that is, the condition that Q(0) nEnd(£'(ri)) = Z[0]. Roughly speaking, one 
should omit every step that involves the conductor of the order of discriminant ^2, as only 
the condition that Q(0) nEnd(-E'(ri)) = Z[0] depends on this conductor. After making these 
changes to the proof, one proves that the quantity 

5^ # I0 G End(E(^) : Tr(0) = ^2, N(0) = \{d\- ^2), Tr(^., (rfi + v^) ■ 0^) = 2t| 
[n] ^ 

is if there exists a prime p ^ i such that the Hilbert symbol 

(d,, D{n^ - 5^D))p = {du, (dj-^d^ - 2ty - dju~''d.,)p = -1, 
and otherwise, that it is bounded above by 

2#{P ■ vAt)>M<iufu')>o,p\2e} . ~(2) ^2) ■ # I b C a : N(b) = , b invertible 

One also shows that the upper bound is an equality in the case that ^^^j^jf is relatively 
prime to the conductor of the order of discriminant d^f^^. This should not be surprising, as 
it is basically the statement of Theorem 15. II with the conditions involving /2, the conductor 
of the order of discriminant d2, omitted. □ 
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Remark 5.2. There is an alternative way of proving Theorem \2.4\ that does not require 
making the necessary modifications to the proof of \UV\ Thm. 3.1]. First one notes that 



G End(E(ri)) : Tr(0) = d^, N(</)) = \{dl - ^2) 
Tiiui ■ 0^) = t, 



equals 




Tr(<^) = rf2/-^N(<^) = \{dlf-' - d,f-^), 

e End(E(ri)) : Tr(u;i ■ 0^) = + d^f - d^f + ^2), 

Q(0)nEnd(E(ri)) =Z[0] 

where f ranges over all positive divisors 0//2, the conductor of the order of discriminant d2; 
the map \{2f(l) — d2f~^ + c/2) g'^fes a bijective map from the latter set to the former. 
Then, one uses repeated applications of Theorem \5.1\ to compute the cardinality of the latter 
set. A series of algebraic manipulations will complete the proof. 



6. Ideals in 



In this section we prove Theorem 13. 8[ which we restate here for the reader's convenience. 
Recall that for any integral ideal I in B^^oo, R0(/) = {y E 00 '■ ly 1} is the right order 
of J. 

Theorem. Fix R a maximal order in B^^oo- Assume that x,u E R and 7, 5 G Z are such 
that 

Tr(M), N(m), and Tr(xM^) + 7 N(m)/5 are modulo 5. 

Define w ■.= x + 'yu/6, Cp E Z to be such that up~^p G Rp\pRp, and Vp := max{vp{6) — Cp,0) . 
Assume that for all p\S,p ^ i, either Cp = or Qp{p'^^w) H R<^ Zp = Zp\p^w] . 
Then # {/ C i? : 5, n G /, N(/) = 6, and w G R0(/)} equals 

Vp{5) 

n E 3f?-l,(Tr(«;),N(i.)) 

\j=Vp{S) (mod 2) / 

where 

^(p) f#{t'modp'^ :?-«!?'+ ao = (modp*^)} if C > 0, 

This section is independent of the rest of the paper, so we disregard any notation fixed 
elsewhere. 

For any prime p, let Rp := R^zZp. lip ^ i, then after fixing an isomorphism of B^ oo®Qp 
with MofO^) we can view Rp as a maximal order in M2(Qp). Moreover, after conjugating 
by an appropriate element, we may assume that Rp = M2(Zp). If Ip is an ideal in M2(Zp), 
then RO(/p) := {A G M2(Qp) : IpA C Q. By IVigSOj Chap. 2, Thm. 2.3], there are 
1 + p + ■ ■ ■ + p^ ideals of norm p'^ in M2(Zp), and they are all of the form 

(^Q prn^ ' (6-1) 
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where n, m are positive integers such that n+m = N, and t G Zp. The triple (n, m, t mod p"^) 
uniquely determines the ideal. By abuse of notation, we will use the triple {n, m, t) to refer 

to both the element ( ^ and the ideal it generates. 

We say an element y G M2(Qp) is optimally embedded if Qp{y) (1 Rp = 1jp[y] and that y is 
primitive if w E Rp \pRp. An ideal / is primitive if it is generated by a primitive element, 
i.e. if / = {n,m,t) where at least one of n,m, or v{t) are zero. We divide primitive ideals 
into three cases: Case 1) n = 0, Case 2) m = 0, and Case 3) n, m > 0, and v(t) = 0. Note 
that these cases are mutually exclusive unless we are considering the unit ideal. 

In §6.11 we give a formula that computes, for a fixed integral element y G M2(Qp) and 
integer N, the number of ideals Ip of norm p^ with y G RO(/p). In §6.2[ we give a criterion 
to determine whether one ideal is contained in another. In §6.3[ we explain how the results 
in the two previous sections come together to prove Theorem 13.81 

6.1. Right orders of ideals in M2(Zp). 

Lemma 6.1. Let y G M2(Qp) be an integral element. Assume that there exists an r E Z>o 
such that p^y is optimally embedded. Then there exists an A E GL2(Z,p) such that 

^y^~' = {r^ Tr(yf ) 

Proof. Write V — {^^ • First assume that p divide the conductor of D(j»'"y) := Tr(j9''y)^ — 
4N(p^?/). Then we may consider the element 

p2'-D(y)-p'-+iTr(y) 

y ■=py + ^ ; 

2p 

since p'^y is optimally embedded, y' is primitive. By writing y' as a matrix, we see that 
the primitivity of y' implies that one of a — ci, 6 or c has valuation exactly — r. If p does 
not divide the conductor of D{p^y), then necessarily r = 0. In this case, using the relation 
D(?/) = (a — d)^ — 46c, we can also show that one of a — rf, b, or c has valuation exactly — r. 

If v{b) = -r, then let A = (^f' ^^'^ . If v{c) = -r, then let A = (^^' . If 

v{b),v{c) > — r, and v{a — d) = — r, then let A = ( ^ ^ j . One can easily 

check that these matrices fulfill the assertions in the lemma. □ 

Proposition 6.2. Let y be an integral element o/M2(Qp). Assume that there exists an 
r G Z>o such that p^y is optimally embedded. Then the number of primitive ideals Ip of 
norm p^ such that y G RO(/p) is J^jLr(Tr(?/), N(?/)), where: 



#{t mod p^-"" ■.t'^-ait + ao = (mod p^^'") } if > r, 
if iV < r. 



In particular, there is a unique primitive ideal Jp of norm p^ such that y G R0( Jp). Fur- 
thermore, if Ip is any other ideal such that y G RO (Jp) then Ip Jp. 
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Proof. By Lemma I^TTl there exists A G GL2(Zp) such that y := = ( ^-r Tr (y) ) ' 

Recall that an element y is in the right order of RpT if and only if TyT~^ G Rp. Therefore, 
y is in the right order of RpT if and only if y is in the right order of RpT .Thus it suffices 
to count the number of ideals Ip such that y G RO(/p). 

Let Ip correspond to the triple {n,m,t). Then y G RO(/p) if and only if 



m-n-r>0, v{t) -n-r>0, t^p-'"^ - t Ti{w)p-'^ + N(tf;)p"-'"+'^ G Zp. (6.2) 

The first two conditions imply that m > n and v{t) > n. Since one of m,n,v{t) must 
be 0, this implies that n = and m = N. Now the first condition shows that there are no 
solutions if < r; so from now on we assume that r < N. The second condition implies 
that t = p^t] substituting this into the third condition we obtain 

^pT-N _ Tr(u;)tp"-^ + N{w)p''-^ G Zp. (6.3) 

This completes the proof of the formula for Ujv/-r(Tr(u;), N(ty)). 

The argument above shows that any ideal Ip such that y G RO(/p) is equal to 

^^[o p^) ' 

where t satisfies (16.31) and > r; in particular, if = r, there is a unique ideal Jp : = 
Rp ^ such that y G RO (Jp). Since 

-, -1 

1 t 



1 tp'' 




A 



1 

p' 



A 



pN^r I ^ Rp: 



Ip ^ Jp, as desired. □ 
6.2. Lattice of ideals in M2(Zp). 

Lemma 6.3. Let z be a primitive integral element o/M2(Zp). Then there is a unique ideal 
of norm p^ containing z for all N < Vp(N{z)). We write Iz^n for this unique ideal. 

Proof. Let {n,m,t) be a generator for the ideal RpZ, i.e. {n,m,t) = ez, for some e G -Rp. 
Then (n, m, t) is contained in an ideal / if and only if z is contained in /. Assume that 
(n, m, t) is contained in [n', m', t'), where m! + n' = N . Thus, the product 

p'' t \ fp-""' -t'p-^\ _ /p"-"' tp-""' - t'p"-^ 



must be in Rp. Therefore, n>n',m> m',t = t'p"~'^' (modp™ ). A case-by-case analysis 
shows that there is a unique primitive tuple (n', m', t') with n' + m' = N that satisfies these 
conditions; they are listed here for the readers' convenience. 

n = {}^ n' = {},m' = N,t' = t (modp^), (6.4) 
m = ^ n' = A^, m' = 0, (6.5) 
v{t) = {]^n' = m\n{n,N),m' = N -n\t' = t (modp""'). (6.6) 
We remark that there is no condition on t' in (16. 5p since t' is only defined modulo p^' = 1. □ 

25 



Lemma 6.4. Let j, k, r, s be non-negative integers and let y, z he 'primitive elements of norm 
at least p^,p'^ respectively. Then p^Iy,r ^ p''Iz,s if and only ifr,s>s— j + k and ly^s-j+k = 
Iz,.s-j+k- (If s — j + k <Q then this last condition is vacuous.) 



Proof. We prove the backwards direction first. Let t/at, zn denote generators for ly^Ni h,N 
respectively for any (valid) integer A^. Since s > s — j + k and ly^s-j+k = Iz,s-j+k, we may 
write Zs as z'ys-j+k for some z' G Rp of norm p^~^. We rewrite p^yr{p^Zs)~^ as follows 

p^-^yr{z'y,^,+k)-^ = yry:l,+k-P'~^z'~^- 

By definition of y^ and since r > s — j + k, yryjlj+k ^ ^p- Additionally, since z' has norm 

pj-k^ pj-k^/~l ^ Thus p'ly^r ^ P''lz,s- 

Now we consider the forward direction; assume that p^Iy^r ^ P^Iz,s- Then p^'^Iy r C ^ C 
Rp. Since ly^r is primitive, this implies that j > k, or equivalently that s > s + k—j. Without 
loss of generality we reduce to the case that k = 0. 

If s ^ i; then all remaining conditions are vacuous, so we assume that s > j. Let 
{nr,mr,tr) be a generator of ly^r and {ns,ms,ts) be a generator of Iz,s- By assumption, we 
have 

tr \ fp~"" -tsP~'\ _ trP'-"'' - tsP'^"'^' 

p'"'' / I / ~ I pj+rrir-ms 

or, equivalently 

j + Ur > Us, j + rUr > nig, trp""" = tsP"'^ (uiod p'^"'')- 

If rig = 0, then j + r > j + > = s. Similarly if = 0, then j + r > j + Ur > = s. 
If ns,ms > 0, then v{ts) = 0. Since trt'^p^'^"^'"'^' — pJ+r-s ^ ^.j^jg again implies that 
j + r > s. It remains to show that Iz,s-j = Iy,s-j- 

First we treat the case when Ur = 0. Then rUg > and tg = trp"^". Since at least one of 
v(ts), rig must be zero, this shows that Ug = and tr = tg (mod pY~K Using fl6.4p - fl6.6p . 
we see that ly^g-j O (0, s — j,tr modp*"-') and Iz,s-j ^ (0, s — j,tg modp*"-') so we have 
equality. 

Now consider the case when = 0. Then by fl6.4l) - fl6.6p ly^s^j ^ (s — j, 0,0). Since 
j > ^s, ng > s — j > 0. By another application of fl6.4p - fl6.6l) . we see that regardless of 
whether = or nig > and v{tg) = we have Iz,s-j ^ (s — j, 0, 0). 

Finally we consider the case where nr,mr > and v{tr) = 0. If Ur < s — j, then 
ly^g^j ^ {nr,s — j — n^, tr mod p''"-'""''). In this case, the conditions above show that 
rrigjUg > 0. This in turn implies that tg is a p-adic unit, and since tgp'^'' = trP^" (mod pY~^ 
we have rig = rir < Sj. Then, by fl6.4p -f l6T6|) . Iz,s-j ^ {nr,s — j — rir,tg mod p*"-'"'^'"), 
which is equal to Iy,g-j. The sole remaining case is when rir > s — j which implies that 
Iy,g-j = (s — j, 0,0). Since tgt'^p'^'' = p^" (modp*"-'), rig > s — j. As in the previous 
paragraph, this means that regardless of whether rrig = or rrtg > and v{ts) = we have 
o (s-j, 0,0). □ 

6.3. Proof of Theorem 13.81 Recall that i? is a fixed maximal order in oo and x, m G i? 

and 7, 5 G Z are such that 

Tr(u), N(u), and Tr(xu^) + 7N(u)/5 are modulo 5. 
We are interested in computing the number of left integral ideals I of R that satisfy 

5, M G /, N(J) = (5, and w:= x + G RO(J), (6.7) 
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where R0(/) = {y G B^^oo '■ ly 1} is the right order of /. Note that, due to the assumptions 
above, w is integral, i.e. N(w) and Tr(w) are in Z. 

For any prime p, let Rp := R ®z ^p- By |Vig80 Chap. 3, Prop. 5.1], the map 

{left ideals of i?} -> JJ^ {left ideals of Rp] , I y-^ (Ip) 

V 

is a bijection {Ip := I ®i Zp). Thus 

#{/ CR:I satisfies = JJ Wp ^ Rp ■ Ip satisfies fETj) } 

p 

If p I 5, then the first condition of f l6.7p implies that N(/p) = (1) and so Ip = Rp. li p = i, 
then Ri is the unique maximal order in oo ®(Q and ideals in Ri are completely classified 
by the ^-valuation of their norms, and for any ideal C R^ we have that R{Ie) = Rg. Since 
w is integral and 5 \ N(m) it is clear that the ideal of norm i^^^^ satisfies conditions ( 16. 7p . 
Thus for all p outside the finite set {p : p\S,p ^ £}, we have 

# {Ip ^Rp:=R Zp : satisfying (EJD} = 1- 

Henceforth we assume that p\6 and p ^ L Recall that Cp G Z is such that up~^^ G Rp\pRp 
and Tp = max{vp{6) — Cp, 0). 

Lemma 6.5. We have w G RO(-RpU + Rp6) and the norm of RpU + Rp6 divides 6'^p~'''p . 

Proof. In order to prove that w G RO(-Rpn + Rp6), we will show that 6w and uw are 
both contained in RpU + Rp6. The first containment is straightforward. For the second 
containment, we need the fact that Tr(a6) = Tr(6a) for any a,h E Rp and (13. 4p . Consider 
the following expansion 

uw = Ti{u)w — u^w = Tt{u)w — u^x — 'ju^u/ S 
= Tt{u)w + x^n — (Tr(n^x) + '-fN{u)/6). 

Since, by assumption, Tr(n) and Tr(xn^ + 'yN{u)/6 are divisible by 6, uw G RpU + RpO. 

Now we compute the norm of RpU + Rp6. If Vp = 0, then u G Rp6 and N{RpU + Rp6) = 
N[Rp6) = 5"^. Now assume that Tp > 0. We claim that fp(N(n)) > 2cp + r = Cp + Vp{6). If 
Cp = 0, then this follows from our assumptions on x, u, 6, and 7. 

Assume that Cp > and that Vp(N{u)) < Cp + Vp{6). Using the criterion in Lemma [6.41 
we can show that 6 G RpU so RpU + Rp6 = RpU. Since RO(-Rpti) = RO{RpUp~'^p), by the 
first part of the proof w is in the right order of an ideal of norm N(u) — 2cp < Vp. However, 
Proposition 16. 2l shows that this is impossible since by assumption p''pw is optimally embedded 
in M2(Zp). This proves the claim. 

To review, we have shown that if rp > then Vp(N{u)) > Cp + Vp{6). If N(m) = Cp + Vp{6) 

Oil Oi 2 



then clearly ^{RpU + Rp6)\6p'^p . Assume that N(m) > Cp + Up{6) and write u as 

\02,1 0-2,2 

By the definition of Cp, there exists i,j such that Vp{aij) = Cp. Define A G M2(Zip) to be 
such that row i and column j consist only of zeros and the remaining entry has a 1. Then 



N(m + 5 A) = N{u) + STi{Au'') = N{u) + Sa 



Since u + 6A E RpU + Rp6, this shows that N {RpU + Rp6)\6p'^p , which completes the proof. □ 
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Now we are in a position to prove that there are 



Vp{5} 

E :J$d,(Tr(i.),N(«;)) 
i=o 

j=Vp(S) (mod 2) 

many ideals Ip C Rp that satisfy (16. 7p . 

If Cp = 0, then the sum is 1, so we must prove that there is a unique ideal that satisfies (16. 7p . 
In this case u is a primitive element of Rp so Lemmas 16 .31 and |6 .41 imply that there is a unique 
ideal of norm S that contains u, Iu,v{S)- We clearly have RpU + Rp6 C Iu^v{S)- Lemma 1^751 
gives the opposite containment, so we have equality. Another application of Lemma 16.51 
shows that w G R0{Iu,v{5))- 

Henceforth we assume that Cp > 0. Using Lemma 16.41 and Lemma 16. 5[ one can show 
that RpU + Rp6 = p'^Iu',r, where u' := up~^p. Therefore, w G RO{p''Iu',r) = R-0(/„',r)- By 
assumption w, Vp satisfy the hypotheses of Proposition [6]2l so Iu',r is the unique ideal of norm 

such that w G RO(/n',r), and moreover, for any ideal / such that w G R0(/) we have 
I ^ Iu',r- By Lemma [6. 4[ we also know that for any ideal / of norm p^^^^ such that / C 1^, ^ 
we have u, 5 E I. Thus it suffices to count the number of ideals / of norm p'"^^^ such that 
w G R0(/). This is equal to the number of primitive ideals of norm p^ where j is at most 
v{6) and j = v{6) (mod 2). Applying Proposition 16.21 completes the proof. 

Since we have already shown that 

#{J CR: I satisfies ([62D} = JJ ^ Rp ■ h satisfies (leTj) }. 

this proves Theorem 13.81 □ 
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